Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8AA7F0EC5E7111ECAD853A46C4F9AE02.roa
File:                     8AA7F0EC5E7111ECAD853A46C4F9AE02.roa (raw, json)
Hash identifier:          oNRUokVXAfxmQdqkxyz8cTGwG9nv0RtFZmw3j7p3pO8=
Subject key identifier:   E9:2F:01:54:74:55:5B:40:5F:6F:B6:E4:C1:9B:9F:4B:76:58:2C:6F
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E03
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8AA7F0EC5E7111ECAD853A46C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:26:33 +0000
ROA not before:           Fri 02 Oct 2026 15:26:33 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140809
IP address blocks:        103.168.100.0/23 maxlen: 24
                          2001:df6:d680::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28163 (0x6e03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:26:33 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcd29-a6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e6:ad:bf:39:c4:54:64:d2:ba:55:e4:b4:fd:
                    17:88:0b:ae:d2:92:3f:27:7a:38:f8:9c:1f:b5:e1:
                    03:4e:8a:64:a7:0e:c4:a3:4b:68:bb:fb:e4:9e:b0:
                    98:0f:9d:a8:82:55:63:1c:2b:3c:50:37:18:ac:4f:
                    cb:eb:65:33:c0:78:3f:69:87:36:31:d7:8c:34:99:
                    3d:4b:b8:cb:91:53:c7:fc:9a:1f:d5:de:00:de:59:
                    1e:7d:17:25:2b:5d:37:26:b0:63:a6:06:dd:ba:7f:
                    30:46:fb:0f:d5:eb:aa:67:99:cf:c6:24:7f:f4:12:
                    25:d2:e5:c7:1a:33:92:ce:a8:a9:62:ac:0f:42:b4:
                    ef:4e:b0:2f:69:c4:81:b3:71:b2:d0:03:fc:dd:08:
                    23:b7:c3:c1:fa:db:79:04:47:af:55:e7:75:e8:c1:
                    b7:b0:c9:88:c4:73:c1:ea:ac:61:f6:1b:72:93:8e:
                    95:f5:bb:45:4d:66:eb:73:71:5e:9d:33:95:95:63:
                    43:ce:db:bb:97:90:16:ec:0b:0d:74:ab:74:8c:8b:
                    07:a2:b9:9d:b2:c8:98:7e:6b:bd:fd:3f:f1:e4:1b:
                    d2:c5:8e:9a:27:94:30:a9:ed:58:dd:1b:df:34:38:
                    36:52:d7:f9:71:f7:8f:10:e9:aa:37:c5:16:02:2c:
                    ea:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2F:01:54:74:55:5B:40:5F:6F:B6:E4:C1:9B:9F:4B:76:58:2C:6F
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8AA7F0EC5E7111ECAD853A46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.100.0/23
                IPv6:
                  2001:df6:d680::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:82:1e:65:ff:14:fe:91:45:06:e2:be:0f:90:40:a1:a6:5f:
         f8:80:6c:a1:6d:83:2b:b8:24:24:e0:96:8d:78:86:c5:ee:e0:
         c9:ff:dc:cb:ce:7e:8a:8e:97:b2:54:cd:3d:b3:75:8f:67:22:
         d0:02:89:a1:68:a5:8d:59:cd:3b:22:1f:be:ed:5e:65:e1:d3:
         59:62:80:63:ed:02:6b:c1:6e:ed:c9:88:c4:83:1f:6a:b0:59:
         12:2e:68:41:f1:a0:4a:2b:d8:05:e8:be:d9:0b:d8:62:62:3d:
         0c:72:b0:24:b2:c3:cc:fe:a0:86:97:51:26:0b:ea:c3:cd:e0:
         9b:d2:ee:31:60:58:da:19:64:7e:e4:63:21:aa:ee:2e:4c:d5:
         e3:47:79:fd:e8:21:7a:d2:24:3c:79:ba:b2:4f:fd:55:8f:c1:
         4b:ad:1f:e5:e1:da:cc:e9:2c:97:e9:09:eb:b5:39:31:22:24:
         16:e4:91:d2:ec:f5:17:ac:84:30:d4:85:79:d5:e6:f7:c4:85:
         e0:b3:69:8e:62:90:4a:6d:c0:52:16:8f:6f:22:27:74:bd:e3:
         68:02:f0:f1:66:f9:ef:b4:06:cb:11:e8:a9:04:6a:eb:ff:46:
         d5:de:ea:7b:5d:9e:ba:f1:78:62:e5:97:39:5e:40:4c:e3:12:
         e0:43:a6:1a
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICbgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUyNjMzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2QyOS1hNmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7uatvznEVGTSulXktP0XiAuu0pI/J3o4+JwfteEDTopkpw7Eo0tou/vknrCY
D52oglVjHCs8UDcYrE/L62UzwHg/aYc2MdeMNJk9S7jLkVPH/Jof1d4A3lkefRcl
K103JrBjpgbdun8wRvsP1euqZ5nPxiR/9BIl0uXHGjOSzqipYqwPQrTvTrAvacSB
s3Gy0AP83Qgjt8PB+tt5BEevVed16MG3sMmIxHPB6qxh9htyk46V9btFTWbrc3Fe
nTOVlWNDztu7l5AW7AsNdKt0jIsHormdssiYfmu9/T/x5BvSxY6aJ5Qwqe1Y3Rvf
NDg2Utf5cfePEOmqN8UWAizq9QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFOkvAVR0
VVtAX2+25MGbn0t2WCxvMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOEFBN0YwRUM1
RTcxMTFFQ0FEODUzQTQ2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ6hkMA8EAgACMAkDBwAgAQ321oAwDQYJKoZIhvcNAQELBQADggEB
AImCHmX/FP6RRQbivg+QQKGmX/iAbKFtgyu4JCTglo14hsXu4Mn/3MvOfoqOl7JU
zT2zdY9nItACiaFopY1ZzTsiH77tXmXh01ligGPtAmvBbu3JiMSDH2qwWRIuaEHx
oEor2AXovtkL2GJiPQxysCSyw8z+oIaXUSYL6sPN4JvS7jFgWNoZZH7kYyGq7i5M
1eNHef3oIXrSJDx5urJP/VWPwUutH+Xh2szpLJfpCeu1OTEiJBbkkdLs9ReshDDU
hXnV5vfEheCzaY5ikEptwFIWj28iJ3S942gC8PFm+e+0BssR6KkEauv/RtXe6ntd
nrrxeGLllzleQEzjEuBDpho=
-----END CERTIFICATE-----
Generated at Sun Oct 25 03:22:25 2026 by rpki-client